You cannot create a new trust through the Domains and Trusts console when you are logged on locally to a domain controller (817013)


The information in this article applies to:

  • Microsoft Windows Server 2003, 64-Bit Datacenter Edition
  • Microsoft Windows Server 2003, 64-Bit Enterprise Edition
  • Microsoft Windows Server 2003, Datacenter Edition
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows Server 2003, Web Edition

SYMPTOMS

When you are logged on locally to a domain controller and you try to create a new trust by using the Domains and Trusts console, the operation may be unsuccessful, and you may receive an "access denied" error message.

CAUSE

This issue occurs only if you are logged on locally to the domain controller as an ordinary user (through an account other than Administrator). By default, ordinary users are blocked from logging on locally to a domain controller unless Group Policy is modified to permit this.

WORKAROUND

To work around this issue, use one of the following methods:
  • Use the Runas command with domain administrator credentials instead of entering credentials in the Domains and Trusts console.

    -or-
  • Use the Runas command from another computer.
Note For more information about how to use Runas, see the "Using Run as" Windows 2003 Help Topic.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Modification Type:MajorLast Reviewed:5/18/2005
Keywords:kbbug KB817013
©2004 Microsoft Corporation. All rights reserved.